CVE-2018-10864

An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way...

5.3 Medium

An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

1.23%Up 0.3 points since Apr 14, 2021

What each source reports

CVE List Score used 5.3

Record: CVE-2018-10864
CVSS 3.0: 5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-400
Updated: 2026-11-02

EUVDEUVD-2018-2930 5.3

Record: EUVD-2018-2930
CVSS 3.0: 5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3mqx-hc7r-v3c4 6.2

An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way...

Record: GHSA-3mqx-hc7r-v3c4
CVSS 3.0: 6.2 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-400
Updated: 2026-11-02

NVD 5.3

Record: CVE-2018-10864
CVSS 3.0: 5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.0: 6.2 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-400
Updated: 2026-11-02

OSVRHSA-2018:2373 9.8

Red Hat Security Advisory: redhat-certification security update

Record: RHSA-2018:2373
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`redhat-certification` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.el7	0:5.16-20180809.el7
`redhat-certification-backend` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.el7	0:5.16-20180809.el7
`redhat-certification-baremetal` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.el7	0:5.16-20180809.el7
`redhat-certification-cloud` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.el7	0:5.16-20180809.el7
`redhat-certification-hardware` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.1.el7	0:5.16-20180809.1.el7
`redhat-certification-hardware-preview` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.1.el7	0:5.16-20180809.1.el7
`redhat-certification-openstack` Red Hat:certifications:1::el7 From an advisory covering 3 CVEs	before 0:5.16-20180809.el7	0:5.16-20180809.el7

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-10864 is a medium vulnerability (CVSS 5.3) in Redhat Certification, published August 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. No source names a fixed version.

References

Show 11 moreShow less